Lucene search
+L

2583 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/20 12:00 a.m.•3 views

CVE-2024-5118: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS5.5AI score0.00746EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/19 6:15 a.m.•37 views

CVE-2024-5098

A vulnerability has been found in SourceCodester Simple Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public...

6.5CVSS5.9AI score0.00484EPSS
SaveExploits1References4
CVE
CVE
•added 2024/05/19 6:00 a.m.•79 views

CVE-2024-5098

SourceCodester Simple Inventory System 1.0 has a SQL injection vulnerability in login.php via the username parameter. The CVE-2024-5098 entry confirms an exploit has been disclosed. Several connected sources corroborate the issue and suggest updating to a newer version as the fix, and offer inter...

6.5CVSS7.3AI score0.00484EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/05/19 6:00 a.m.•46 views

CVE-2024-5098 SourceCodester Simple Inventory System login.php sql injection

A vulnerability has been found in SourceCodester Simple Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public...

5.5CVSS5.9AI score0.00484EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/19 12:00 a.m.•8 views

CVE-2024-5098: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Simple Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public...

6.5CVSS5.5AI score0.00484EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/05/18 6:31 p.m.•42 views

CVE-2024-5093 SourceCodester Best House Rental Management System login.php sql injection

A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The...

7.5CVSS7.5AI score0.00698EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/05/18 6:31 p.m.•13 views

CVE-2024-5093 SourceCodester Best House Rental Management System login.php sql injection

A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The...

7.5CVSS7.8AI score0.00698EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/05/18 12:00 a.m.•13 views

House Rental Management System SQL注入漏洞

House Rental Management System is a house rental management system by Carlo Montero, an individual developer. SourceCodester Best House Rental Management System version 1.0 suffers from a SQL injection vulnerability that stems from the username/password parameter in the login.php file...

9.8CVSS7.9AI score0.00698EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/18 12:00 a.m.•6 views

CVE-2024-5093: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS5.5AI score0.00698EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/05/16 9:00 a.m.•55 views

CVE-2024-4972 code-projects Simple Chat System login.php sql injection

A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

6.5CVSS7.1AI score0.00615EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/05/16 9:00 a.m.•26 views

CVE-2024-4972 code-projects Simple Chat System login.php sql injection

A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

6.5CVSS7.4AI score0.00615EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/16 12:00 a.m.•7 views

CVE-2024-4972: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Simple Chat System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument email/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

9.8CVSS5.5AI score0.00615EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/14 12:00 a.m.•7 views

CVE-2024-33485: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in CASAP Automated Enrollment System using PHP/MySQLi with Source Code V1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the login.php component...

9.8CVSS5.9AI score0.0071EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/23 11:15 p.m.•28 views

CVE-2024-4075

A vulnerability classified as problematic has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file login.php. The manipulation of the argument txtAddress leads to cross site scripting. It is possible to initiate the attack remotely. The...

6.1CVSS3.7AI score0.00574EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/04/23 12:00 a.m.•6 views

PT-2024-29026

Name of the Vulnerable Software and Affected Versions Kashipara Online Furniture Shopping Ecommerce Website version 1.0 Description A problematic vulnerability has been found in the login.php file, where the manipulation of the txtAddress argument leads to cross-site scripting. This issue can be...

6.1CVSS5.1AI score0.00574EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/23 12:00 a.m.•5 views

CVE-2024-4075: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Kashipara Online Furniture Shopping Ecommerce Website 1.0. This affects an unknown part of the file login.php. The manipulation of the argument txtAddress leads to cross site scripting. It is possible to initiate the attack remotely. The...

6.1CVSS4AI score0.00574EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/23 12:00 a.m.•16 views

Online Furniture Shopping Ecommerce Website 跨站脚本漏洞

Online Furniture Shopping Ecommerce Website is an online furniture shopping ecommerce website. A cross-site scripting vulnerability exists in Online Furniture Shopping Ecommerce Website, which is caused by a cross-site scripting vulnerability in the txtAddress parameter of the login.php file...

6.1CVSS6.2AI score0.00574EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/15 12:00 a.m.•5 views

CVE-2024-3769: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Student Record System 3.20. Affected is an unknown function of the file /login.php. The manipulation of the argument id/password leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.5AI score0.0095EPSS
SaveExploits1References2
NVD
NVD
•added 2024/04/11 4:15 p.m.•24 views

CVE-2024-31678

Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file...

9.8CVSS7.6AI score0.00594EPSS
SaveExploits1References1
CVE
CVE
•added 2024/04/11 12:00 a.m.•74 views

CVE-2024-31678

The Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the password parameter in the login.php file. This flaw allows for potential unauthorized access to sensitive data . While no exploit information or specific real-world incidents are provided, the vulnerability is r...

9.8CVSS8AI score0.00594EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder